Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psWYAOJP-CNQFXNiyb6-GO3dM2Q.roa
File:                     psWYAOJP-CNQFXNiyb6-GO3dM2Q.roa (raw, json)
Hash identifier:          5ghvJ10j8HovjwSMG1tedYqRwLQXzYpi1cdBrN4IMyA=
Subject key identifier:   A6:C5:98:00:E2:4F:F8:23:50:15:73:62:C9:BE:BE:18:ED:DD:33:64
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1495
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psWYAOJP-CNQFXNiyb6-GO3dM2Q.roa
Signing time:             Sun 07 Feb 2021 11:59:13 +0000
ROA not before:           Sun 07 Feb 2021 11:59:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.115.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5269 (0x1495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A6C59800E24FF82350157362C9BEBE18EDDD3364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:01:d7:79:b4:c7:cd:8f:40:58:07:d4:05:
                    f7:3f:2a:af:07:a8:07:fc:a2:b7:64:ff:b9:e3:e4:
                    2e:b9:39:bd:8a:a6:64:be:4c:76:6f:ff:a3:7f:58:
                    d8:23:7c:ab:32:3a:3d:86:c2:8e:67:70:87:76:fe:
                    49:6d:ef:46:a4:f3:38:e6:0d:46:0b:25:60:68:4a:
                    04:02:04:1b:8b:fd:2e:34:ce:d1:9a:54:f2:78:5b:
                    06:26:a3:ea:bd:8f:83:7c:a3:fa:aa:93:e1:1f:a2:
                    54:76:c9:12:dc:ee:03:ed:a6:61:d0:94:2b:4a:c5:
                    64:2b:28:23:8c:c9:4f:dc:81:dd:77:81:8f:d0:d3:
                    79:f6:ef:c3:92:6f:68:ce:b2:1b:05:3d:16:72:0d:
                    8d:a0:e8:d8:2d:af:f3:d7:fc:e7:c2:49:18:77:d7:
                    99:aa:53:95:3a:45:64:e1:a4:c4:4f:9e:13:27:06:
                    e4:f8:41:51:eb:77:a9:b5:31:82:b4:0b:13:ba:4b:
                    4c:66:53:76:12:1b:5d:b1:b8:49:28:2c:d6:6e:20:
                    ae:6a:35:cf:0b:fb:6b:29:83:6d:ae:c1:fc:15:0a:
                    1c:ec:64:d2:3f:ed:17:68:6d:6f:40:0b:d1:3b:dc:
                    03:29:f4:72:9e:1b:76:20:25:ff:52:bb:21:20:7d:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:98:00:E2:4F:F8:23:50:15:73:62:C9:BE:BE:18:ED:DD:33:64
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/psWYAOJP-CNQFXNiyb6-GO3dM2Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.128/25

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:4a:a3:d7:a0:24:06:6c:9d:19:31:1f:ad:36:81:3f:5e:
         cc:d7:7f:9e:10:09:d6:8e:4f:0b:9b:24:2a:e7:c5:45:aa:8b:
         fc:3b:19:e0:59:31:30:f8:03:ba:66:82:69:e8:c3:0d:95:e2:
         58:5c:f3:c4:7e:ef:96:ab:8c:0e:f5:21:c8:db:f6:0f:68:35:
         0d:67:b1:2f:dd:a8:2d:55:6b:3a:60:c8:90:de:91:70:8d:df:
         ac:b2:ea:e5:dc:be:71:9c:be:4d:13:63:3b:29:b3:1b:1b:34:
         76:60:d6:5e:7a:44:fc:88:6a:fd:fc:5d:92:8e:68:f9:31:07:
         f4:77:50:34:fb:6e:67:83:e9:94:00:b7:b1:f5:ca:3a:52:91:
         01:27:a6:79:5d:59:44:c0:01:5f:bc:dd:fb:c3:d5:90:3a:13:
         fb:24:d7:61:ff:f1:cd:35:53:18:57:c0:08:80:e8:ac:cb:10:
         07:67:7d:29:16:53:0b:d9:01:7c:40:72:8c:b4:00:65:97:34:
         6e:5a:37:70:2d:0e:43:90:6f:20:60:ec:c0:d1:43:e9:75:35:
         44:d2:dd:4a:d8:66:cf:b0:f6:d3:09:47:50:8c:d2:5b:6c:54:
         22:89:23:d7:53:13:bb:7e:0b:c6:d4:6b:6b:b8:b3:f7:b6:a3:
         fd:fe:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----